Gmork
Add to Chrome

Scam library · Shopping · Texts

Google Voice verification code scam on Marketplace and Craigslist

You post an item for sale or a lost pet notice. Someone contacts you and says they want to make sure you're a real person, so they'll text you a code. Please read it back.

The code isn't from them. It's from a service like Google Voice, a bank or an email provider, and reading it back lets them create an account linked to your phone number or take over one of yours.

Last updated

What the message looks like

Social media message · example, not real

From: Messenger, a buyer for your bike

Hi is the bike still available? I've been scammed before so I want to verify you're real. I'm sending you a code, please send it back to me.

[Your phone: Your Google Voice verification code is 482-913.]

This is a made-up example. Reading back any code you receive gives someone else access.

How this scam works

With a Google Voice number tied to your phone, scammers can contact other victims while looking like a real, verified U.S. number. With a code from your bank or email, they may get into your accounts.

Verification codes are only for you, the person signing in. No buyer, seller or support agent has a legitimate reason to ask for one. The same trick shows up with fake support agents and hacked friend accounts.

People who post lost pet notices are a favorite target, because they're eager to hear from anyone with information. The scammer claims to have found the pet, then asks for the code before sharing a photo.

Red flags

  • Anyone asking you to read back a code that was texted to you.
  • A 'verify you're real' story from a buyer or seller.
  • Messages that say the code came 'from me'.
  • Pressure to send it quickly before the deal is off.
  • A code message that mentions a service you weren't signing in to.

How to tell it’s fake

  1. Read the full code text: it says which service it's from, and usually 'don't share this code'.
  2. Real buyers don't need a code from you. Offer to meet in a public place instead.
  3. If you didn't request the code, don't share it with anyone.

What to do if you clicked, paid or shared info

Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.

If you clicked a link or called back

  • If you didn't share the code, just block the person and report their profile.

If you paid

  • If you paid anything, contact your bank or payment app now.

If you shared personal info, a password or a code

  • If you shared a Google Voice code, reclaim your number in Google Voice's settings. If it was a bank or email code, change that password and sign out other sessions immediately.

Where to report and get help (U.S.)

If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.

  • Your bank or card issuer
    Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account.
  • Federal Trade Commission (FTC) · ReportFraud.ftc.gov
    Report the scam and get a step-by-step recovery plan.
  • FBI Internet Crime Complaint Center (IC3) · ic3.gov
    Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details.
  • AARP Fraud Watch Network Helpline · aarp.org helpline
    Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern.
  • IdentityTheft.gov · IdentityTheft.gov
    If you shared your Social Security number or someone opened accounts in your name.

How Gmork Scam Guard would warn you

Scam Guard runs in Chrome and Edge on your computer and reads the Marketplace, Messenger or Craigslist chat you have open. When a buyer asks for a code, it explains in plain words that codes are only for you and what the code would unlock. If the person still seems legit, ask before you share.

Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.

Add to Chrome Add to Edge

Questions people ask

Why would a buyer want my verification code?
To create a Google Voice number or another account tied to your phone, or to get into one of your accounts.
I already sent it. Is my account hacked?
Not necessarily, but act now: reclaim your Google Voice number or change the password of whatever service sent the code.
Is it ever safe to share a code?
No. Verification codes are for you alone, whoever asks.

Sources

Related scams

Browse the full scam library · Scam-safety guides